Prosafe Network Management System

CVEs (25)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-38096	Netgear Prosafe Network Management System	Cri	0.73	9.8	0.82	May 3, 2024	NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to…
CVE-2023-50231	Netgear Prosafe Network Management System	Cri	0.67	9.6	0.53	May 3, 2024	NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is…
CVE-2023-49693	Netgear Prosafe Network Management System	Cri	0.64	9.8	0.01	Nov 29, 2023	NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
CVE-2021-27274	Netgear Prosafe Network Management System	Cri	0.64	9.8	0.08	Mar 29, 2021	This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MFileUploadController class.…
CVE-2023-41182	Netgear Prosafe Network Management System	Hig	0.62	8.8	0.59	May 3, 2024	NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…
CVE-2023-38095	Netgear Prosafe Network Management System	Hig	0.62	8.8	0.66	May 3, 2024	NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2021-27273	Netgear Prosafe Network Management System	Hig	0.62	8.8	0.65	Mar 29, 2021	This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The…
CVE-2024-5505	Netgear Prosafe Network Management System	Hig	0.61	8.8	0.47	Jun 6, 2024	NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…
CVE-2023-44450	Netgear Prosafe Network Management System	Hig	0.61	8.8	0.54	May 3, 2024	NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…
CVE-2023-44449	Netgear Prosafe Network Management System	Hig	0.61	8.8	0.53	May 3, 2024	NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…
CVE-2023-38099	Netgear Prosafe Network Management System	Hig	0.61	8.8	0.57	May 3, 2024	NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2023-38098	Netgear Prosafe Network Management System	Hig	0.61	8.8	0.13	May 3, 2024	NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2024-5246	Netgear Prosafe Network Management System	Hig	0.60	8.8	0.31	May 23, 2024	NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this…
CVE-2021-27275	Netgear Prosafe Network Management System	Hig	0.60	8.3	0.73	Mar 29, 2021	This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication…
CVE-2024-5247	Netgear Prosafe Network Management System	Hig	0.59	8.8	0.27	May 23, 2024	NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…
CVE-2024-6814	Netgear Prosafe Network Management System	Hig	0.57	8.8	0.02	Aug 21, 2024	NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…
CVE-2024-6813	Netgear Prosafe Network Management System	Hig	0.57	8.8	0.02	Aug 21, 2024	NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…
CVE-2023-38102	Netgear Prosafe Network Management System	Hig	0.57	8.8	0.01	May 3, 2024	NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…
CVE-2023-38101	Netgear Prosafe Network Management System	Hig	0.57	8.8	0.02	May 3, 2024	NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2023-38100	Netgear Prosafe Network Management System	Hig	0.57	8.8	0.01	May 3, 2024	NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…

CVE-2023-38096CriMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.73cvss 9.8epss 0.82
NETGEAR ProSAFE Network Management System MyHandlerInterceptor Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of NETGEAR ProSAFE Network Management System. Authentication is not required to…
CVE-2023-50231CriMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.67cvss 9.6epss 0.53
NETGEAR ProSAFE Network Management System saveNodeLabel Cross-Site Scripting Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Minimal user interaction is…
CVE-2023-49693CriNov 29, 2023
Netgear
Prosafe Network Management System
risk 0.64cvss 9.8epss 0.01
NETGEAR ProSAFE Network Management System has Java Debug Wire Protocol (JDWP) listening on port 11611 and it is remotely accessible by unauthenticated users, allowing attackers to execute arbitrary code.
CVE-2021-27274CriMar 29, 2021
Netgear
Prosafe Network Management System
risk 0.64cvss 9.8epss 0.08
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MFileUploadController class.…
CVE-2023-41182HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.62cvss 8.8epss 0.59
NETGEAR ProSAFE Network Management System ZipUtils Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…
CVE-2023-38095HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.62cvss 8.8epss 0.66
NETGEAR ProSAFE Network Management System MFileUploadController Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2021-27273HigMar 29, 2021
Netgear
Prosafe Network Management System
risk 0.62cvss 8.8epss 0.65
This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The…
CVE-2024-5505HigJun 6, 2024
Netgear
Prosafe Network Management System
risk 0.61cvss 8.8epss 0.47
NETGEAR ProSAFE Network Management System UpLoadServlet Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…
CVE-2023-44450HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.61cvss 8.8epss 0.54
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…
CVE-2023-44449HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.61cvss 8.8epss 0.53
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…
CVE-2023-38099HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.61cvss 8.8epss 0.57
NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2023-38098HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.61cvss 8.8epss 0.13
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2024-5246HigMay 23, 2024
Netgear
Prosafe Network Management System
risk 0.60cvss 8.8epss 0.31
NETGEAR ProSAFE Network Management System Tomcat Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to exploit this…
CVE-2021-27275HigMar 29, 2021
Netgear
Prosafe Network Management System
risk 0.60cvss 8.3epss 0.73
This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication…
CVE-2024-5247HigMay 23, 2024
Netgear
Prosafe Network Management System
risk 0.59cvss 8.8epss 0.27
NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is…
CVE-2024-6814HigAug 21, 2024
Netgear
Prosafe Network Management System
risk 0.57cvss 8.8epss 0.02
NETGEAR ProSAFE Network Management System getFilterString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…
CVE-2024-6813HigAug 21, 2024
Netgear
Prosafe Network Management System
risk 0.57cvss 8.8epss 0.02
NETGEAR ProSAFE Network Management System getSortString SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Authentication is required to…
CVE-2023-38102HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.57cvss 8.8epss 0.01
NETGEAR ProSAFE Network Management System createUser Missing Authorization Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…
CVE-2023-38101HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.57cvss 8.8epss 0.02
NETGEAR ProSAFE Network Management System SettingConfigController Exposed Dangerous Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System. Although…
CVE-2023-38100HigMay 3, 2024
Netgear
Prosafe Network Management System
risk 0.57cvss 8.8epss 0.01
NETGEAR ProSAFE Network Management System clearAlertByIds SQL Injection Privilege Escalation Vulnerability. This vulnerability allows remote attackers to escalate privileges on affected installations of NETGEAR ProSAFE Network Management System. Although authentication is…

Page 1 of 2